Configure Maven Central publishing with GPG signing

Author: twinkalp10

.github/workflows/publish.yml

@@ -20,13 +20,18 @@ jobs:
         with:
           java-version: '17'
           distribution: 'temurin'
-          server-id: github
-          settings-path: ${{ github.workspace }}
+          server-id: central
+          server-username: MAVEN_CENTRAL_USERNAME
+          server-password: MAVEN_CENTRAL_PASSWORD
 
-      - name: Build with Maven
-        run: mvn -B package --file pom.xml
+      - name: Import GPG Key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
 
-      - name: Publish to GitHub Packages
-        run: mvn deploy -s settings.xml
+      - name: Publish to Maven Central
+        run: mvn --batch-mode clean deploy -Dgpg.passphrase="${{ secrets.GPG_PASSPHRASE }}"
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          MAVEN_CENTRAL_USERNAME: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
+          MAVEN_CENTRAL_PASSWORD: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}

README.md

@@ -15,7 +15,7 @@ For setup details and the full API reference, see [reloop.sh/docs](https://reloo
 <dependency>
   <groupId>sh.reloop</groupId>
   <artifactId>reloop-java</artifactId>
-  <version>1.8.0</version>
+  <version>0.1.0</version>
 </dependency>
 ```
 

pom.xml

@@ -6,7 +6,11 @@
 
     <groupId>sh.reloop</groupId>
     <artifactId>reloop-java</artifactId>
-    <version>1.8.0</version>
+    <version>0.1.0</version>
+
+    <name>reloop-java</name>
+    <description>Java SDK for Reloop</description>
+    <url>https://github.com/reloop-labs/reloop-java</url>
 
     <licenses>
         <license>
@@ -16,6 +20,22 @@
         </license>
     </licenses>
 
+    <developers>
+        <developer>
+            <id>reloop</id>
+            <name>Reloop Team</name>
+            <email>dev@reloop.sh</email>
+            <organization>Reloop</organization>
+            <organizationUrl>https://reloop.sh</organizationUrl>
+        </developer>
+    </developers>
+
+    <scm>
+        <connection>scm:git:git://github.com/reloop-labs/reloop-java.git</connection>
+        <developerConnection>scm:git:ssh://github.com:reloop-labs/reloop-java.git</developerConnection>
+        <url>https://github.com/reloop-labs/reloop-java/tree/main</url>
+    </scm>
+
     <properties>
         <maven.compiler.source>17</maven.compiler.source>
         <maven.compiler.target>17</maven.compiler.target>
@@ -49,6 +69,57 @@
                 <artifactId>maven-surefire-plugin</artifactId>
                 <version>3.2.5</version>
             </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-source-plugin</artifactId>
+                <version>3.3.0</version>
+                <executions>
+                    <execution>
+                        <id>attach-sources</id>
+                        <goals>
+                            <goal>jar-no-fork</goal>
+                        </goals>
+                    </execution>
+                </executions>
+            </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-javadoc-plugin</artifactId>
+                <version>3.6.3</version>
+                <executions>
+                    <execution>
+                        <id>attach-javadocs</id>
+                        <goals>
+                            <goal>jar</goal>
+                        </goals>
+                    </execution>
+                </executions>
+            </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-gpg-plugin</artifactId>
+                <version>3.1.0</version>
+                <executions>
+                    <execution>
+                        <id>sign-artifacts</id>
+                        <phase>verify</phase>
+                        <goals>
+                            <goal>sign</goal>
+                        </goals>
+                    </execution>
+                </executions>
+            </plugin>
+            <plugin>
+                <groupId>org.sonatype.central</groupId>
+                <artifactId>central-publishing-maven-plugin</artifactId>
+                <version>0.4.0</version>
+                <extensions>true</extensions>
+                <configuration>
+                    <publishingServerId>central</publishingServerId>
+                    <tokenAuth>true</tokenAuth>
+                    <autoPublish>true</autoPublish>
+                </configuration>
+            </plugin>
         </plugins>
     </build>
 </project>